Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a663034303a3a2f33322d3438203d3e20313331373735.roa
File:                     323430363a663034303a3a2f33322d3438203d3e20313331373735.roa (raw, json)
Hash identifier:          ensgrzaC2Lu09Ye+8SEqHwnMi8XbJ2NcWsl+oEDverI=
Subject key identifier:   E1:74:DF:4A:76:7C:86:B9:5F:DA:31:29:B5:8A:E8:A7:A2:D5:D3:DA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5EA88691F80F6228CB12B7A391F47B5CBA58B0CF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a663034303a3a2f33322d3438203d3e20313331373735.roa
Signing time:             Tue 21 Dec 2021 03:43:34 +0000
ROA not before:           Tue 21 Dec 2021 03:38:34 +0000
ROA not after:            Wed 21 Dec 2022 03:43:34 +0000
asID:                     131775
IP address blocks:        2406:f040::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:a8:86:91:f8:0f:62:28:cb:12:b7:a3:91:f4:7b:5c:ba:58:b0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 21 03:38:34 2021 GMT
            Not After : Dec 21 03:43:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0f:9e:60:8f:eb:40:e8:d6:d6:f2:b2:af:04:
                    fa:22:7c:d6:d2:a0:39:ba:c2:5a:d2:b3:47:ac:cb:
                    9c:1f:2a:83:54:06:f2:db:40:92:6d:79:ef:c2:5f:
                    61:8b:76:19:31:b5:21:55:62:08:2e:81:88:87:68:
                    98:46:ab:17:04:91:43:6e:1c:2f:2e:59:5f:51:1c:
                    19:c1:7a:4b:ce:c2:3d:bf:51:7a:8f:98:91:88:8f:
                    ca:e9:ab:e4:22:f1:f7:90:c1:e8:01:be:a5:65:ad:
                    d1:8e:45:3b:5d:f7:92:b0:75:2c:01:e0:cf:40:2f:
                    98:b7:1b:40:87:56:b8:ed:74:ed:8f:fc:fd:dc:03:
                    e0:08:c3:0f:f1:11:a7:6b:4a:c9:c4:ff:42:d9:db:
                    7d:27:da:fa:52:67:56:c3:2f:4d:35:47:b4:18:5b:
                    2a:62:6c:1a:6e:1b:87:94:b0:bb:c8:50:1d:fc:61:
                    2b:5a:be:e4:d8:4b:c8:95:54:bd:1c:84:7c:b5:97:
                    03:58:0f:b0:16:c4:8b:a4:c9:66:a3:0a:60:26:ad:
                    87:10:4e:4f:f0:8f:ac:ad:40:c3:cd:20:df:f8:b1:
                    b4:0b:bc:a6:62:ba:be:e5:4e:b2:82:f7:0c:6b:45:
                    3b:27:95:77:1b:21:98:42:72:b9:f6:a8:4f:95:45:
                    71:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:74:DF:4A:76:7C:86:B9:5F:DA:31:29:B5:8A:E8:A7:A2:D5:D3:DA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430363a663034303a3a2f33322d3438203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:f040::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:cc:b4:4d:48:20:58:3b:73:24:d1:bf:86:af:b3:5f:38:58:
         6e:6d:1d:76:a0:2e:22:8e:bd:df:c6:86:04:bb:24:fa:e2:e7:
         25:7a:a3:39:f3:d2:c4:79:5f:8b:2c:c2:3b:74:cb:6e:ca:fa:
         c1:84:4e:02:a4:e9:8b:ff:70:af:6b:44:ea:46:fa:2c:71:78:
         4f:10:a3:c0:48:2f:b8:1c:34:64:49:57:4d:eb:27:0f:3c:17:
         bb:cb:90:0e:92:65:1a:b2:56:6a:d5:65:b1:2e:e6:69:d9:a8:
         30:ee:33:bd:b2:1e:b9:81:a1:d9:1a:91:d7:94:bb:d9:4c:12:
         ac:a8:e9:c0:27:ba:0a:78:25:2c:26:13:af:d5:1a:48:de:94:
         fd:d5:31:e0:9c:b0:9c:ac:ca:4b:50:69:59:55:fe:21:28:db:
         6f:2c:4b:fb:17:0c:b7:46:78:45:0c:58:1c:5d:fa:e0:0a:7d:
         e4:ac:8a:ab:eb:47:2a:7a:dc:0e:5b:03:d7:d0:f7:a7:9e:3d:
         9b:5b:f1:0c:37:a6:54:d6:16:55:78:69:f5:c9:65:c2:5b:bf:
         08:4a:7a:3d:ca:a6:2a:ce:28:97:95:16:79:6d:fe:d9:d4:67:
         36:f6:9b:2c:9f:50:94:db:3c:0e:1a:22:7e:e6:c9:08:cc:29:
         06:d1:e3:e5
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUXqiGkfgPYijLErejkfR7XLpYsM8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTIyMTAzMzgzNFoX
DTIyMTIyMTAzNDMzNFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBQzBGOUU2MDhGRUI0MEU4RDZENkYyQjJBRjA0RkEyMjdDRDZEMkEwMzlC
QUMyNUFEMkIzNDdBQ0NCOUMxRjJBODM1NDA2RjJEQjQwOTI2RDc5RUZDMjVGNjE4
Qjc2MTkzMUI1MjE1NTYyMDgyRTgxODg4NzY4OTg0NkFCMTcwNDkxNDM2RTFDMkYy
RTU5NUY1MTFDMTlDMTdBNEJDRUMyM0RCRjUxN0E4Rjk4OTE4ODhGQ0FFOUFCRTQy
MkYxRjc5MEMxRTgwMUJFQTU2NUFERDE4RTQ1M0I1REY3OTJCMDc1MkMwMUUwQ0Y0
MDJGOThCNzFCNDA4NzU2QjhFRDc0RUQ4RkZDRkREQzAzRTAwOEMzMEZGMTExQTc2
QjRBQzlDNEZGNDJEOURCN0QyN0RBRkE1MjY3NTZDMzJGNEQzNTQ3QjQxODVCMkE2
MjZDMUE2RTFCODc5NEIwQkJDODUwMURGQzYxMkI1QUJFRTREODRCQzg5NTU0QkQx
Qzg0N0NCNTk3MDM1ODBGQjAxNkM0OEJBNEM5NjZBMzBBNjAyNkFEODcxMDRFNEZG
MDhGQUNBRDQwQzNDRDIwREZGOEIxQjQwQkJDQTY2MkJBQkVFNTRFQjI4MkY3MEM2
QjQ1M0IyNzk1NzcxQjIxOTg0MjcyQjlGNkE4NEY5NTQ1NzFDMTAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsD55gj+tA6NbW8rKvBPoi
fNbSoDm6wlrSs0esy5wfKoNUBvLbQJJtee/CX2GLdhkxtSFVYggugYiHaJhGqxcE
kUNuHC8uWV9RHBnBekvOwj2/UXqPmJGIj8rpq+Qi8feQwegBvqVlrdGORTtd95Kw
dSwB4M9AL5i3G0CHVrjtdO2P/P3cA+AIww/xEadrSsnE/0LZ230n2vpSZ1bDL001
R7QYWypibBpuG4eUsLvIUB38YStavuTYS8iVVL0chHy1lwNYD7AWxIukyWajCmAm
rYcQTk/wj6ytQMPNIN/4sbQLvKZiur7lTrKC9wxrRTsnlXcbIZhCcrn2qE+VRXHB
AgMBAAGjggIAMIIB/DAdBgNVHQ4EFgQU4XTfSnZ8hrlf2jEptYrop6LV09owHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMyMzQzMDM2M2E2NjMwMzQzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMxMzMzMTM3MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQG8EAwDQYJKoZI
hvcNAQELBQADggEBABjMtE1IIFg7cyTRv4avs184WG5tHXagLiKOvd/GhgS7JPri
5yV6oznz0sR5X4sswjt0y27K+sGETgKk6Yv/cK9rROpG+ixxeE8Qo8BIL7gcNGRJ
V03rJw88F7vLkA6SZRqyVmrVZbEu5mnZqDDuM72yHrmBodkakdeUu9lMEqyo6cAn
ugp4JSwmE6/VGkjelP3VMeCcsJysyktQaVlV/iEo228sS/sXDLdGeEUMWBxd+uAK
feSsiqvrRyp63A5bA9fQ96eePZtb8Qw3plTWFlV4afXJZcJbvwhKej3KpirOKJeV
Fnlt/tnUZzb2myyfUJTbPA4aIn7myQjMKQbR4+U=
-----END CERTIFICATE-----